Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: xoZmSOB8x2UokzfOmFZBRFpWn0+UiYEVLyspuSIkV88=
Subject key identifier: F6:03:67:77:30:0C:5A:84:AE:84:90:05:1B:DA:54:55:CA:88:86:3F
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 0196BE5C46F8B1507F1F45B37346961624CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0BDE
Signing time: Sun 11 May 2025 08:00:40 +0000
Manifest this update: Sun 11 May 2025 08:00:40 +0000
Manifest next update: Mon 12 May 2025 08:00:40 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: D4FjQgkkeHC8qpTIiyNzoEqA8a2Qdmd6IWW2btm7KSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:46:f8:b1:50:7f:1f:45:b3:73:46:96:16:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: May 11 08:00:40 2025 GMT
Not After : May 12 08:00:40 2025 GMT
Subject: CN=f6036777300c5a84ae8490051bda5455ca88863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:6e:1b:bd:76:0d:e3:ff:e7:b0:56:30:0b:
69:ac:dc:bf:e8:d1:87:30:77:cb:2b:65:5b:fb:ff:
24:46:6c:cb:93:9c:af:f3:87:4d:44:e5:ba:7f:38:
89:f3:f2:be:75:a0:c2:d3:0f:92:8b:ef:65:77:a2:
78:bf:b9:c2:4c:ad:3b:83:9e:69:8b:95:17:bc:a3:
13:1d:7e:ce:03:37:44:ec:a6:38:5c:28:f9:90:21:
0b:ce:b3:b2:b8:57:28:e7:84:7e:d8:63:b6:fd:e3:
c4:59:d8:80:c0:55:79:0b:97:e9:a7:55:d0:1f:65:
7d:9c:de:5a:b0:64:03:4d:3b:8c:11:c3:91:4f:1e:
6c:3c:2d:57:fc:28:9e:d0:bc:0f:f0:c8:1f:8b:8f:
3f:a7:c2:73:23:56:a1:72:5a:41:11:b1:75:c5:dd:
55:61:38:6d:6c:5d:7d:5a:7a:6c:3f:a4:56:d7:8d:
5a:77:ca:b2:fd:6e:d6:56:a5:46:28:63:3f:86:64:
7a:01:68:b7:ef:37:ef:06:f7:63:b8:11:00:43:35:
e8:2c:9b:80:2f:e1:40:dc:3d:ef:11:80:69:8e:64:
de:8a:0e:7d:70:b4:7e:bc:b2:aa:c5:27:84:48:51:
c7:2c:37:33:a7:9b:f5:31:c9:15:9a:f8:e9:4e:ff:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:67:77:30:0C:5A:84:AE:84:90:05:1B:DA:54:55:CA:88:86:3F
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:95:29:d9:a6:4c:92:dd:3f:22:04:4c:4d:2e:51:b9:80:
5e:a2:0b:42:84:cc:63:85:7c:7e:4f:11:e0:13:d5:59:3d:2f:
3f:89:30:45:76:cd:22:74:3f:a6:b9:c6:21:fe:4f:f0:30:d7:
f0:26:e2:64:d9:ac:3f:d8:0f:eb:eb:34:71:39:0d:11:20:31:
99:4f:01:8b:72:1f:25:50:2d:7b:c9:9c:9e:f3:a9:cd:c9:39:
c7:32:2b:8d:c1:86:33:84:9a:88:5f:0a:e1:33:48:97:a8:fa:
f9:71:68:3c:6b:62:05:f9:3c:77:98:c7:a7:77:96:42:3c:e0:
46:6b:1a:64:41:56:13:ac:a7:cb:ef:46:a3:23:fa:e2:f5:73:
11:c4:1f:48:a2:52:98:3e:c3:e7:fd:6a:01:d7:10:29:30:b5:
40:3d:83:39:15:a9:9f:c9:13:9a:d9:60:a4:70:79:43:ff:98:
33:7a:d8:f6:1b:ed:a9:68:f4:aa:06:d6:09:e2:fc:df:80:0f:
63:07:4a:69:d3:fb:50:af:cc:15:a8:e7:9b:78:39:b8:68:ca:
8a:6a:1e:8f:4a:17:f6:67:38:a5:f3:b7:77:05:b6:1f:e9:d4:
81:23:3f:fd:40:6f:b3:5a:1a:f7:8d:aa:f3:c1:61:04:de:d6:
c0:31:78:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XEb4sVB/H0Wzc0aWFiTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm
ZmUyZjgwHhcNMjUwNTExMDgwMDQwWhcNMjUwNTEyMDgwMDQwWjAzMTEwLwYDVQQD
EyhmNjAzNjc3NzMwMGM1YTg0YWU4NDkwMDUxYmRhNTQ1NWNhODg4NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqduG712DeP/57BWMAtprNy/6NGH
MHfLK2Vb+/8kRmzLk5yv84dNROW6fziJ8/K+daDC0w+Si+9ld6J4v7nCTK07g55p
i5UXvKMTHX7OAzdE7KY4XCj5kCELzrOyuFco54R+2GO2/ePEWdiAwFV5C5fpp1XQ
H2V9nN5asGQDTTuMEcORTx5sPC1X/Cie0LwP8Mgfi48/p8JzI1ahclpBEbF1xd1V
YThtbF19WnpsP6RW141ad8qy/W7WVqVGKGM/hmR6AWi37zfvBvdjuBEAQzXoLJuA
L+FA3D3vEYBpjmTeig59cLR+vLKqxSeESFHHLDczp5v1MckVmvjpTv9I5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYDZ3cwDFqEroSQBRvaVFXKiIY/MB8GA1UdIwQY
MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct
MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy
LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4eVKdmm
TJLdPyIETE0uUbmAXqILQoTMY4V8fk8R4BPVWT0vP4kwRXbNInQ/prnGIf5P8DDX
8CbiZNmsP9gP6+s0cTkNESAxmU8Bi3IfJVAte8mcnvOpzck5xzIrjcGGM4SaiF8K
4TNIl6j6+XFoPGtiBfk8d5jHp3eWQjzgRmsaZEFWE6yny+9GoyP64vVzEcQfSKJS
mD7D5/1qAdcQKTC1QD2DORWpn8kTmtlgpHB5Q/+YM3rY9hvtqWj0qgbWCeL834AP
YwdKadP7UK/MFajnm3g5uGjKimoej0oX9mc4pfO3dwW2H+nUgSM//UBvs1oa942q
88FhBN7WwDF4NA==
-----END CERTIFICATE-----
Generated at Sun May 11 14:40:49 2025 by rpki-client